{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,5,18]],"date-time":"2026-05-18T22:51:38Z","timestamp":1779144698043,"version":"3.51.4"},"publisher-location":"New York, NY, USA","reference-count":17,"publisher":"ACM","license":[{"start":{"date-parts":[[2008,10,27]],"date-time":"2008-10-27T00:00:00Z","timestamp":1225065600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2008,10,27]]},"DOI":"10.1145\/1456396.1456397","type":"proceedings-article","created":{"date-parts":[[2008,11,6]],"date-time":"2008-11-06T13:49:50Z","timestamp":1225979390000},"page":"1-10","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":137,"title":["Formal analysis of SAML 2.0 web browser single sign-on"],"prefix":"10.1145","author":[{"given":"Alessandro","family":"Armando","sequence":"first","affiliation":[{"name":"Universit\u00e0 di Genova , Genova, Italy"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Roberto","family":"Carbone","sequence":"additional","affiliation":[{"name":"Universit\u00e0 di Genova, Genova, Italy"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Luca","family":"Compagna","sequence":"additional","affiliation":[{"name":"SAP Research, Mougins, France"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Jorge","family":"Cuellar","sequence":"additional","affiliation":[{"name":"Siemens AG, Munich, Germany"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Llanos","family":"Tobarra","sequence":"additional","affiliation":[{"name":"Universidad de Castilla-La Mancha, Albacete, Spain"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"320","published-online":{"date-parts":[[2008,10,27]]},"reference":[{"key":"e_1_3_2_1_1_1","doi-asserted-by":"publisher","DOI":"10.1007\/11513988_27"},{"key":"e_1_3_2_1_2_1","doi-asserted-by":"publisher","DOI":"10.1109\/CSF.2007.24"},{"key":"e_1_3_2_1_3_1","doi-asserted-by":"publisher","DOI":"10.1007\/s10207-007-0041-y"},{"key":"e_1_3_2_1_4_1","doi-asserted-by":"publisher","DOI":"10.1145\/1368310.1368330"},{"key":"e_1_3_2_1_5_1","doi-asserted-by":"publisher","DOI":"10.5555\/647171.716095"},{"issue":"29","key":"e_1_3_2_1_6_1","volume":"2","author":"Dolev D.","year":"1983","unstructured":"D. Dolev and A. Yao . On the Security of Public-Key Protocols. IEEE Transactions on Information Theory , 2 ( 29 ), 1983 . D. Dolev and A. Yao. On the Security of Public-Key Protocols. IEEE Transactions on Information Theory, 2(29), 1983.","journal-title":"On the Security of Public-Key Protocols. IEEE Transactions on Information Theory"},{"key":"e_1_3_2_1_7_1","unstructured":"Google. Web-based reference implementation of SAML--based SSO for Google Apps. http:\/\/code.google.com\/apis\/apps\/sso\/saml_reference_implementation_web.%html 2008.  Google. Web-based reference implementation of SAML--based SSO for Google Apps. http:\/\/code.google.com\/apis\/apps\/sso\/saml_reference_implementation_web.%html 2008."},{"key":"e_1_3_2_1_8_1","doi-asserted-by":"publisher","DOI":"10.5555\/956415.956441"},{"key":"e_1_3_2_1_9_1","doi-asserted-by":"publisher","DOI":"10.1007\/11555827_28"},{"key":"e_1_3_2_1_10_1","doi-asserted-by":"publisher","DOI":"10.1145\/1045405.1045409"},{"key":"e_1_3_2_1_11_1","unstructured":"Internet2. \n      Shibboleth\n      Project\n    .\n   Available at http:\/\/shibboleth.internet2.edu\/ 2007\n  .  Internet2. Shibboleth Project. Available at http:\/\/shibboleth.internet2.edu\/ 2007."},{"key":"e_1_3_2_1_12_1","doi-asserted-by":"publisher","DOI":"10.5555\/794197.795075"},{"key":"e_1_3_2_1_13_1","volume-title":"Liberty Alliance Project.","author":"OASIS. Identity Federation","year":"2004","unstructured":"OASIS. Identity Federation . Liberty Alliance Project. Available at http:\/\/www.projectliberty.org\/resources\/specifications.php, 2004 . OASIS. Identity Federation. Liberty Alliance Project. Available at http:\/\/www.projectliberty.org\/resources\/specifications.php, 2004."},{"key":"e_1_3_2_1_14_1","volume-title":"March","author":"OASIS.","year":"2005","unstructured":"OASIS. Profiles for the OASIS Security Assertion Markup Language (SAML) V2.0. Available at http:\/\/www.oasis-open.org\/committees\/tc_home.php?wg_abbrev=security , March 2005 . OASIS. Profiles for the OASIS Security Assertion Markup Language (SAML) V2.0. Available at http:\/\/www.oasis-open.org\/committees\/tc_home.php?wg_abbrev=security, March 2005."},{"key":"e_1_3_2_1_15_1","volume-title":"April","author":"OASIS.","year":"2005","unstructured":"OASIS. Security Assertion Markup Language (SAML) v2.0. Available at http:\/\/www.oasis-open.org\/committees\/tc_home.php?wg_abbrev=security , April 2005 . OASIS. Security Assertion Markup Language (SAML) v2.0. Available at http:\/\/www.oasis-open.org\/committees\/tc_home.php?wg_abbrev=security, April 2005."},{"key":"e_1_3_2_1_16_1","doi-asserted-by":"publisher","DOI":"10.1109\/MIC.2003.1250582"},{"key":"e_1_3_2_1_17_1","doi-asserted-by":"publisher","DOI":"10.1007\/11542322_20"}],"event":{"name":"CCS08: 15th ACM Conference on Computer and Communications Security 2008","location":"Alexandria Virginia USA","acronym":"CCS08","sponsor":["SIGSAC ACM Special Interest Group on Security, Audit, and Control","ACM Association for Computing Machinery"]},"container-title":["Proceedings of the 6th ACM workshop on Formal methods in security engineering"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/1456396.1456397","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/1456396.1456397","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,18]],"date-time":"2025-06-18T13:29:54Z","timestamp":1750253394000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/1456396.1456397"}},"subtitle":["breaking the SAML-based single sign-on for google apps"],"short-title":[],"issued":{"date-parts":[[2008,10,27]]},"references-count":17,"alternative-id":["10.1145\/1456396.1456397","10.1145\/1456396"],"URL":"https:\/\/doi.org\/10.1145\/1456396.1456397","relation":{},"subject":[],"published":{"date-parts":[[2008,10,27]]},"assertion":[{"value":"2008-10-27","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}